CISA Adds Critical Progress Kemp LoadMaster Flaw (CVE-2026-8037) to Known Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical-severity command injection vulnerability in Progress Kemp LoadMaster (CVE-2026-8037, CVSS score: 9.6) to its Known Exploited Vulnerabilities (KEV) catalog. This flaw allows an unauthenticated attacker to execute arbitrary commands on susceptible devices. Federal Civilian Executive Branch agencies are mandated to apply necessary patches by August 10, 2026, due to active exploitation in the wild.